Security Protocol & Architecture
The defence runs on the machine.
Vortex9 is a local instrument owned and operated by Mampi Technologies Ltd. These controls belong to the desktop app and are separate from the mystic9.net sanctuary terms.
Packaged archive
The installer is one ASAR archive. That build checks the archive before it runs, and a modified copy is refused. The check applies to the installer, not to a development launch.
AES-256 local encryption
License records, Guardian settings, household rules, and the saved threat-feed list are sealed on this device with AES-256-GCM. The key is wrapped by Windows safe storage or the macOS keychain.
Hardware-bound license
A confirmed subscription is sealed to this machine. Copying the program onto another computer does not carry a working paid unlock.
Local telemetry
The shield log and scan buffers stay in memory on this device. Scanned text is not written to the drive. When the session ends, those buffers are wiped.
Air-gapped defence
Host blocks and the household filter run locally. They continue when the network is cut. A paid term that cannot be confirmed stays closed once the sealed record expires.
Debugger lockdown
If a debugger is attached, Vortex9 closes paid features and disengages the shield.